Solution

CyberArk PAM

CyberArk

Protect
Access Control (PR.AC)

Supplier site https://www.cyberark.com/products/privileged-access-manager/

Where it is used: Infrabel Network + critical IT assets SCNF : critical IT assets will be soon deployed on the OT part
Open source: No
Railway specific: No
Niche product: No
Easy to install: No

Keeps assets secured by preventing uncontrolled access or uncontrolled application launches from the end point to the server (server access) all network equipments + Siemens private network access control

Features

Defend Against Attacks Secure privileged identities – human and machine in a tamper-resistant repository. Satisfy Audit and Compliance Icon Satisfy Audit & Compliance Meet internal requirements, manage access and maintain full centralized audit. Enable the Digital Business Icon Enable the Digital Business Securely authenticate users with VPN-less access from a single web portal.

Benefits

secure access to servers securing + tracing of admin access to industrial équipements (SNCF)

Challenges

expertise required (Infrabel) SNCF : very complex indeed. That is why cyberark was chosen (*) for the OT part in order to reuse the expertise gained with the Itdeployment

Weakness

little hand-ons support costly & complex solution

Proof of concept

On going project ( SNCF)